6716 matches found
CVE-2023-0313 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
CVE-2023-0301
Cross-site Scripting XSS - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301...
Integer overflow in publify_core
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10 due to an unlimited length user name field...
GHSA-RC42-JGHF-VR8F Integer overflow in publify_core
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10 due to an unlimited length user name field...
Publify Improper Input Validation vulnerability
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
CVE-2023-0299
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
Input validation
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
CVE-2022-1812
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...
Integer overflow
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...
Information disclosure
Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...
GHSA-7MC4-JP4F-V2J2 Improper Authorization in grumpydictator/firefly-iii
Improper Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...
Authorization
Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0...
GHSA-PF38-5P22-X6H6 Code Injection in pyload-ng
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
Code Injection in pyload-ng
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
Code injection
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
CVE-2023-0297 Code Injection in pyload/pyload
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
CVE-2023-0297 Code Injection in pyload/pyload
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
CVE-2022-2815
CVE-2022-2815 affects Publify/publify versions prior to 9.2.10 due to insecure storage of sensitive information in the GitHub repository. The provided sources describe the root cause as insecure storage, implying potential disclosure of sensitive data. Remediation: upgrade to version 9.2.10 or la...